This update for java-1_7_0-ibm fixes the following issues: Version update to 7.0-10.5 bsc#1038505

  - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in     inftrees.c

  - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in     inffast.c

  - CVE-2016-9842: zlib: Undefined left shift of negative     number

  - CVE-2016-9843: zlib: Big-endian out-of-bounds pointer

  - CVE-2017-1289: IBM JDK: XML External Entity Injection     (XXE) error when processing XML data

  - CVE-2017-3509: OpenJDK: improper re-use of NTLM     authenticated connections

  - CVE-2017-3511: OpenJDK: untrusted extension directories     search path in Launcher

  - CVE-2017-3539: OpenJDK: MD5 allowed for jar verification

  - CVE-2017-3533: OpenJDK: newline injection in the FTP     client

  - CVE-2017-3544: OpenJDK: newline injection in the SMTP     client

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for java-1_7_1-ibm fixes the following issues: Version update to 7.1-4.5 bsc#1038505

  - CVE-2016-9840: zlib: Out-of-bounds pointer arithmetic in     inftrees.c

  - CVE-2016-9841: zlib: Out-of-bounds pointer arithmetic in     inffast.c

  - CVE-2016-9842: zlib: Undefined left shift of negative     number

  - CVE-2016-9843: zlib: Big-endian out-of-bounds pointer

  - CVE-2017-1289: IBM JDK: XML External Entity Injection     (XXE) error when processing XML data

  - CVE-2017-3509: OpenJDK: improper re-use of NTLM     authenticated connections

  - CVE-2017-3511: OpenJDK: untrusted extension directories     search path in Launcher

  - CVE-2017-3539: OpenJDK: MD5 allowed for jar verification

  - CVE-2017-3533: OpenJDK: newline injection in the FTP     client

  - CVE-2017-3544: OpenJDK: newline injection in the SMTP     client

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for java-1_8_0-openjdk fixes the following issues :

  - Update to version jdk8u151 (icedtea 3.6.0) Security     issues fixed :

  - CVE-2017-10274: Handle smartcard clean up better     (bsc#1064071)

  - CVE-2017-10281: Better queuing priorities (bsc#1064072)

  - CVE-2017-10285: Unreferenced references (bsc#1064073)

  - CVE-2017-10295: Better URL connections (bsc#1064075)

  - CVE-2017-10388: Correct Kerberos ticket grants     (bsc#1064086)

  - CVE-2017-10346: Better invokespecial checks     (bsc#1064078)

  - CVE-2017-10350: Better Base Exceptions (bsc#1064082)

  - CVE-2017-10347: Better timezone processing (bsc#1064079)

  - CVE-2017-10349: Better X processing (bsc#1064081)

  - CVE-2017-10345: Better keystore handling (bsc#1064077)

  - CVE-2017-10348: Better processing of unresolved     permissions (bsc#1064080)

  - CVE-2017-10357: Process Proxy presentation (bsc#1064085)

  - CVE-2017-10355: More stable connection processing     (bsc#1064083)

  - CVE-2017-10356: Update storage implementations     (bsc#1064084)

  - CVE-2016-10165: Improve CMS header processing     (bsc#1064069)

  - CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,     CVE-2016-9843: Upgrade compression library (bsc#1064070)     Bug fixes :

  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and     overlayfs

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for java-1.7.1-ibm is now available for Red Hat Enterprise Linux 6 Supplementary and Red Hat Enterprise Linux 7 Supplementary.

Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

IBM Java SE version 7 Release 1 includes the IBM Java Runtime Environment and the IBM Java Software Development Kit.

This update upgrades IBM Java SE 7 to version 7R1 SR4-FP5.

Security Fix(es) :

* This update fixes multiple vulnerabilities in the IBM Java Runtime Environment and the IBM Java Software Development Kit. Further information about these flaws can be found on the IBM Java Security Vulnerabilities page, listed in the References section.
(CVE-2016-9840, CVE-2016-9841, CVE-2016-9842, CVE-2016-9843, CVE-2017-1289, CVE-2017-3509, CVE-2017-3511, CVE-2017-3533, CVE-2017-3539, CVE-2017-3544)

According to the versions of the mariadb-connector-c package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - inftrees.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging     improper pointer arithmetic. (CVE-2016-9840)

  - inffast.c in zlib 1.2.8 might allow context-dependent attackers to have unspecified impact by leveraging     improper pointer arithmetic. (CVE-2016-9841)

  - The inflateMark function in inflate.c in zlib 1.2.8 might allow context-dependent attackers to have     unspecified impact via vectors involving left shifts of negative integers. (CVE-2016-9842)

  - The crc32_big function in crc32.c in zlib 1.2.8 might allow context-dependent attackers to have     unspecified impact via vectors involving big-endian CRC calculation. (CVE-2016-9843)

  - zlib before 1.2.12 allows memory corruption when deflating (i.e., when compressing) if the input has many     distant matches. (CVE-2018-25032)

  - zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c via a     large gzip header extra field. NOTE: only applications that call inflateGetHeader are affected. Some     common applications bundle the affected zlib source code but may be unable to call inflateGetHeader (e.g.,     see the nodejs/node reference). (CVE-2022-37434)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:8314 advisory.

    The zlib packages provide a general-purpose lossless data compression library that is used by many     different programs.

    Security Fix(es):

    * pcl: zlib: Improper Pointer Arithmetic in pcl (CVE-2025-4638)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-8314 advisory.

    [1.2.7-21.0.1]
    - Resolves: CVE-2025-4638 [Orabug: 38010977]

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for zlib fixes the following issues :

  - CVE-2016-9843: Big-endian out-of-bounds pointer

  - CVE-2016-9842: Undefined Left Shift of Negative Number     (bsc#1003580) CVE-2016-9840 CVE-2016-9841: Out-of-bounds     pointer arithmetic in inftrees.c (bsc#1003579)     Incompatible declarations for external linkage function     deflate (bsc#1003577)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
100375	SUSE SLES11 Security Update : java-1_7_0-ibm (SUSE-SU-2017:1384-1)	Nessus	SuSE Local Security Checks	2017/5/24	2025/12/18	critical
100378	SUSE SLES11 Security Update : java-1_7_1-ibm (SUSE-SU-2017:1387-1)	Nessus	SuSE Local Security Checks	2017/5/24	2025/12/18	critical
104531	SUSE SLED12 / SLES12 Security Update : java-1_8_0-openjdk (SUSE-SU-2017:2989-1)	Nessus	SuSE Local Security Checks	2017/11/13	2025/11/14	critical
100118	RHEL 6 / 7 : java-1.7.1-ibm (RHSA-2017:1221)	Nessus	Red Hat Local Security Checks	2017/5/11	2025/12/19	critical
166836	EulerOS 2.0 SP10 : mariadb-connector-c (EulerOS-SA-2022-2691)	Nessus	Huawei Local Security Checks	2022/11/2	2023/10/6	critical
237486	RHEL 7 : zlib (RHSA-2025:8314)	Nessus	Red Hat Local Security Checks	2025/5/29	2025/10/9	high
238049	Oracle Linux 7 : zlib (ELSA-2025-8314)	Nessus	Oracle Linux Local Security Checks	2025/6/10	2025/9/11	high
96265	SUSE SLED12 / SLES12 Security Update : zlib (SUSE-SU-2017:0003-1)	Nessus	SuSE Local Security Checks	2017/1/3	2026/1/6	critical

检测

插件搜索

critical

critical

critical

critical

critical

high

high

critical